By GCN Staff
Mar 16, 2021
The Federal Risk and Authorization Management Program has released supplemental requirements to ensure cloud service providers (CSPs) keep their container technology in compliance.
Released March 16, the document, Vulnerability Scanning Requirements for Containers, bridges the compliance gaps between traditional cloud and containerized systems by describing “the processes, architecture and security considerations specific to vulnerability scanning for cloud systems using container technology.”
Containers can be installed on bare metal or virtual machines, on-premise systems or within elastic cloud environments and are deployed and managed with various orchestration tools, the document states. According to FedRAMP, the technology introduces risk due to unvalidated external software, non-standard configurations, unmonitored container-to-container communication, ephemeral instances that are not tracked, unauthorized access and registry/repository poison
By Justin Katz
Mar 16, 2021
The U.S. intelligence community on Tuesday issued a declassified report concluding it has no indications that foreign actors attempted to alter technical aspects of the voting process during the 2020 elections. We assess that it would be difficult for a foreign actor to manipulate election processes at scale without detection by intelligence collection on the actors themselves, through physical and cyber security monitoring around voting systems across the country, according to the new report compiled by multiple intelligence agencies and published by the Office of the Director of National Intelligence.
The report draws on the conclusions of a classified document delivered to the White House in January and says Russia, at the direction of President Vladimir Putin, undertook a series of actions to both denigrate President Joe Biden and support former President Donald Trump during the 2020 elections. It also states that China largely avoided any ta
By Lauren C. Williams
Mar 16, 2021
The Defense Department needs to embrace artificial intelligence at every leadership level, according to Robert Work, vice chairman of the National Security Commission on Artificial Intelligence and former deputy defense secretary. We are shifting into an era of systems warfare, Work testified during a joint hearing with the House Armed Services Subcommittee on cyber, innovative technologies and information systems and the House Oversight and Reform national security subcommittee on March 12. Our adversaries explicitly say this and say the way we will defeat the U.S. military is to have better operational systems and the way to get there is to inject AI applications and autonomy into the systems.
By Natalie Alms
Mar 17, 2021
The Department of Labor is using $9.6 million from recently expanded Technology Modernization Fund (TMF) to upgrade its enterprise data infrastructure.
The new project will improve the availability of the agency s data by boosting operational efficiency and public services so that federal agencies and other data consumers can access information more easily.
The Labor Department will use the funding to enable an evidence-based decision-making approach across enforcement, compliance unemployment insurance and other agency mission areas, the General Services Administration said in its announcement.
The proposed project will incorporate enterprise-standard predictive analytics and reporting capabilities into the department’s IT platform, implement enterprise data management and support an application programming interface and public-facing data portal to transform how the Labor Department shares data. “By the end of this project, DOL will unlock the
By Lauren C. Williams
Mar 17, 2021
Could the Defense Department’s goal of having unified communications across the military along with an escalating tech competition with China be the impetus needed for true budget and acquisition reforms?
Bill Greenwalt, a fellow for the American Enterprise Institute who served as the deputy undersecretary of defense for industrial policy during the Bush administration, said the budget process “is the single most important process to look at if you want to have acquisition reform.”
“In the near term, we need to move fast because China’s moving fast,” embracing flexible budget pilots that could be for specific missions, while striving for long-term reforms, Greenwalt said during a March 5 virtual Hudson Institute event on budget agility and competing with China.